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Status of Claims: 

Claims 1-1 8 and 45-46 are pending for examination. 

Claims 19-44 and 47 were withdrawn by the examiner. 

Claims 19-44 and 47 are canceled herein as non-elected claims. 
Claims 48 and 49 are added herein. 
Claims 1 , 5. and 45 are in independent form. 

1 . (Currently Amended) A system, comprising: 

a logic configured to perform ono or more of, cryptographic key maintenance^ 
ond oryptogroph i o koy m i gration for a trusted platform to which the logic 
moy bo ]s bound in a one-to-one manne r, where the cryptographic kev 
maintenance Includes migr ating a rK?rvmlqrgteble sforagq rgpt key from a 
root of a key storage hierarchy associated with a trusted platform module 
associated with the trusted platform : and 

an interface configured to facilitate operably connecting the system to the trusted 
platform, 

2. (Currently Amended) The system of claim 1, where the cryptographic key 
maintenance a nd - th e cryptographic - - k e y - m i grat i on performed by the logic comply with 
the Trusted Computing Group (TCG) specification version 1,1b. 

3. (Original) The system of claim 1 , where the logic comprises an application specific 
integrated circuit (ASIC). 

4. (Original) The system of claim 1, where the logic comprises a microprocessor 
operably connected to a non-volatile memory. 

5. (Currently Amended) A_ [Uhe]] system of c l a i m 1 , comprising: 
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a logic configured to perform one or more of. cryptographic kev maintenance, 
and cryptographic kev migration for a trusted platform to which the logic is 

» 

bound in a one-to-one manner and 

an interface configured to facilitate operablv connecting the system to the trusted 
platform: 

where the logic and the interface comprise part of a USB token. 

6. (Currently Amended) The system of claim 5 [[1]J, where the logic is configured to 
migrate one or more non-mioratable kevs from a trusted platform module associated 
with the trusted platform and configured to use the migrated one or more non- 
mioratabte kevs to decrypt items that were encrypted bv the trusted platform module 
wh e r e th e i nt e rfao o i o configured to f a c il itat e) oporably connecting tho system to tho 
trust e d platform by ono or more of, a Univoroo l Serial Bus i nt e rface; a Sm all Comput e r 
Syst e ms I nt e rf a ce interfac e , a P e riph e ra l Compon o nt Interconnect i ntorfaoo. a PC I 
Exprooo (PCIE) i nterface, a 130 4 i ntorfaco, an I nductrial Stondord Arohitooturo 
I nt e rf a c era n - Ext en d o d Ind us tr i a l- St a nd a rd Aroh i tooturo i ntorfoco, o wiro i ooo oonnootion, 
and o m i orochanno l intorfaoo . 

7. (Currently Amended) The system of claim 1, where the loalc Is configured to 
perform porforming cryptographic key maintenance i no l udoo including cloning the 
trusted platform with the cooperation of a manufacturer of the trusted platform and an 
owner of the trusted platform. 

8. (Currently Amended) The system of claim 7, where the logic is configured to 
perform p e rforming cryptographic key maintenance i nc l ud es including having the 
manufacturer of the trusted platform act as an intermediary and migrating [[a]] the non- 
migratable storage root key from [[a]J the root of [[a]] the key storage hierarchy 
associated with [[a]] fre trusted platform module associated with the trusted platform. 
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9. (Currently Amended) The system of claim 1, where the logic is configured to 
perform p e rforming cryptographic key migration i noludoo including logically attaching a 
trusted platform module migratable key data structure associated with a first protected 
storage tree to a second protected storage tree. 

10. (Currently Amended) The system of claim 1 , where the logic is configured to store 
one or more of, a copy of a storage root key, a binding data that facilitates binding the 
logic to the trusted platform in a one-to-one binding, a processor executable set of 
instructions that facilitate the trusted platform determining that the trusted platform is 
interfacing with the logic instead of [[a]] the trusted platform module, and a processor 
readable set of data that facilitates the trusted platform determining that the trusted 
platform is interfacing with the logic instead of a trusted platform module. 

11. (Currently Amended) The system of claim 1, where the logic is configured to 
facilitate substantially instantaneously restoring [[a]] the trusted platform module. 

12. (Currently Amended) The system of claim 1, where the logic is configured to 
decrypt one or more of, a key, and a piece of data encrypted by [[a]] the trusted platform 
module. 

13. (Original) The system of claim 1, where the logic is configured to execute 
processor executable instructions associated with the logic while preventing execution 
of processor executable instructions not associated with the logic. 

14. (Original) The system of claim 1, where the logic is configured to read 
processor readable data associated with the logic while preventing a second logic from 
reading the processor readable data associated with the logic. 

15. (Original) The system of claim 1, where the logic is configured to detect 
whether there is a functional trusted platform module associated with the trusted 
platform. 
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16. (Original) The system of claim 1. where the logic is configured to prevent 
creation of a new cryptographic key by the system and to prevent performance of an 
attestation service by the logic. 

17. (Original) The system of claim 1, where binding the logic to the trusted 
platform in a one-to-one manner includes producing an optimal asymmetric encryption 
padding (OEAP) binary large object to facilitate copying a storage root key stored in a 
trusted platform module associated with the trusted platform. 

18. (Currently Amended) The system of claim 1, where the logic is configured to 
perform a finite number of cryptographic key maintenance or m i gr a t i on operations. 

19. -44. (Canceled) 

45. (Currently Amended) A system, comprising: 

an electronic apparatus configured with a trusted platform module; and 
an interface operably connected to the electronic apparatus, the interface 
configured to facilitate operably, detachabiy connecting a subordinate 
trusted platform module to the electronic apparatusiand 
a subordinate trusted platform module to communicate with the trusted platform 
module via the interface, the subordinate trusted platform module 
includino logic to migrate a non-miaratable storage root kev from the 
trusted Platform module to be store d within the subordinate trusted 
platform module . 

46. (Original) The system of claim 45, where the electronic apparatus comprises 
one of, a computer, a printer, a cellular telephone, and a digital camera. 

47. (Canceled) 
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48. (New) The system of claim 45 where the interface includes a port, and the 
subordinate trusted platform module is embodied in a removable component that is 
attachable and detachable to the port. 

49. (New) The system of claim 45 where the subordinate trusted platform module is 
configured to use the migrated non-migratable storage root key to decrypt items that 
were encrypted by the trusted platform module. 
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